CVE-2026-86843

The Apache Airflow Teradata provider is vulnerable to SQL injection because the compute-cluster example Dag allows unconstrained free-text Dag Params . These parameters are templated directly into operators that interpolate values into Teradata DDL . An attacker with permission to trigger the Dag...

CVE-2026-86843 Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag

The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...

CVE-2026-81930

The Apache Airflow Snowflake provider fails to validate the account and region fields before interpolating them into request URLs. An attacker can provide values containing /, ?, or # to demote the intended domain to a path, query, or fragment, allowing them to control the request host. This enab...

CVE-2026-81930 Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domain

Apache Airflow's Snowflake provider did not validate the connection's account and region fields before interpolating them into request URLs. The SQL API endpoint is built as https://account.snowflakecomputing.com/api/v2/statements, so an account value containing /, ? or demotes the intended domai...

EUVD-2026-88695

Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. S3ToTeradataOperator and AzureBlobStorageToTeradataOperator interpolate the source bucket's credentials as plain string literals into the CREATE MULTISET TABLE ... LOCATION statement whenever the...

CVE-2026-81862 Apache Airflow Teradata provider: Teradata transfer operators embed cloud storage credentials in SQL text, task logs and Teradata query logs

Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. S3ToTeradataOperator and AzureBlobStorageToTeradataOperator interpolate the source bucket's credentials as plain string literals into the CREATE MULTISET TABLE ... LOCATION statement whenever the...

abdal-cve-2026-60137

English | فارسی 🛡️ Abdal CVE-2026-60137 PoC Exploits Abdal CVE-2026-60137 is a defensive WordPress exposure verifier for the insufficient sanitization of the authornotin parameter in WPQuery, tracked as CVE-2026-60137. The vulnerability can allow SQL injection when untrusted input reaches the...

CVE-2026-24418

CVE-2026-24418 OpenSTAManager = 2.9.8 — Error-Based SQL Injection in Scadenzario Bulk Operations Module Overview Field| Details ---|--- CVE ID| CVE-2026-24418 Severity| HIGH 8.8 CWE| CWE-89: SQL Injection Affected Versions| OpenSTAManager = 2.9.8 Vulnerable Parameter| idrecords POST array...

CVE-2022-27434

CVE-2022-27434 UNIT4 TETA Mobile Edition 29HF13 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page. The vulnerability exist in the error page generated by the application in this case: while changing password. Adding quotation mark to...

CVE-2026-59550

CVE-2026-59550 - AWP Classifieds ≤ 4.4.7 inyección SQL no autenticada Inyección SQL ciega basada en tiempo no autenticada en el plugin de WordPress AWP Classifieds another-wordpress-classifieds-plugin, accesible a través del flujo anónimo invitado de envío de anuncios por AJAX del plugin. | ---|-...

CVE-2023-25157-GeoServer-SQLi-Lab

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — Vulnerability Lab & PoC Report Practical environment Vulnerable Lab and detailed exploitation analysis report for SQL Injection Error-based vulnerability in GeoServer CVE-2023-25157 and the GeoTools library CVE-2023-25158...

CVE-2026-96430

Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter...

CVE-2026-96429

SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2026-96428

SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the words parameter...

CVE-2025-70149-SQL-Injection

CVE-2025-70149 — SQL Injection Research Project Overview Security research project demonstrating exploitation and mitigation of CVE-2025-70149, a critical SQL Injection vulnerability CVSS 9.8/10 in CodeAstro Membership Management System v1.0. CVE Details Field| Value ---|--- CVE ID| CVE-2025-7014...

Aj-Report-sql-CVE-2024-5356-POC

exp.py -u specifies URL or -f specifies file for batch detection, -t specifies threads, -h for help Usage pi install requirements.txt python exp.py -u 目标url -t 10 python exp.py -h Notes Ensure the URL starts with http:// or https://, otherwise an error will occur and cannot execute...

CVE-2023-23279

SQL injection in Canteen Management System v1.0. Bug author: Tuannq Discovered Day: 5/1/2023 Vendors: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html Login account: [email protected]/rootadmin Super Admin account Vulnerability File:...

EUVD-2026-88659

Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter...

CVE-2026-96430 Flowring Agentflow 4.0 - Exposed Dangerous Method or Function

Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter...

CVE-2026-96430

Flowring Agentflow 4.0 (versions before 2026/08/28) contains an Exposed Dangerous Method or Function within the /WebAgenda/SQLWin.do API endpoint. This vulnerability allows remote authenticated users to execute arbitrary SQL commands via the sql parameter . The impact includes high severity conse...